Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
File: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft (raw, json)
Hash identifier: bj8xLn5R3lYP+VqG2MFSiLJTAzbymEJiU5wWNjsdnes=
Subject key identifier: C9:35:FB:41:EB:9C:DF:25:A6:1D:D1:82:95:D9:68:96:06:CB:30:16
Authority key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
Certificate issuer: /CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Certificate serial: 0197B7EA7D2D1A233016EB75342F2B9B078B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
Manifest number: 0E90
Signing time: Sat 28 Jun 2025 19:01:27 +0000
Manifest this update: Sat 28 Jun 2025 19:01:27 +0000
Manifest next update: Sun 29 Jun 2025 19:01:27 +0000
Files and hashes: 1: 7H5MwTgN1OYiRCO4mG4ENm-WPD0.roa (hash: /sYr4Nv4zqcEaNJCLCU0HKPHMEqgFJB/Zeuuas/Ouic=)
2: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl (hash: wyxf/sfPfsVknFyRQ5mCgR9VDLfUW69YXjVqDBADANc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7d:2d:1a:23:30:16:eb:75:34:2f:2b:9b:07:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Validity
Not Before: Jun 28 19:01:27 2025 GMT
Not After : Jun 29 19:01:27 2025 GMT
Subject: CN=c935fb41eb9cdf25a61dd18295d9689606cb3016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:16:70:dd:c4:4b:a6:a9:84:c1:56:ff:02:b1:
7b:11:5b:5e:c0:33:9d:26:2d:34:33:be:3f:2b:b7:
e7:22:4f:cf:22:4e:28:e2:e2:3f:7d:7a:26:e3:62:
67:a7:e3:91:f9:9a:ea:be:ca:df:3c:f1:a3:2e:2e:
47:8d:ca:b0:a5:07:9a:6a:6d:77:32:45:d8:b8:d7:
4a:df:d4:31:b0:6b:4d:a4:eb:34:35:e0:09:9b:5b:
ce:97:93:4a:7c:0a:07:b5:87:36:52:a3:f7:0a:11:
41:0f:9f:5a:71:62:a7:d5:d3:b2:f9:7a:1a:8f:b5:
64:28:a4:b9:41:83:3e:37:30:9f:c1:22:ab:29:9c:
6b:dc:9e:82:8a:03:a2:b4:84:af:f2:9b:a9:9c:76:
84:c7:65:5c:7f:eb:e5:21:29:23:7b:dc:85:a8:6f:
b8:2b:5a:d9:ae:1c:75:c8:ea:23:19:62:7f:ed:69:
86:a2:bc:f1:6f:8e:2b:76:62:77:3f:a0:e2:2c:f9:
60:5a:35:cd:29:0a:47:56:ac:f0:35:e7:cd:5c:a2:
31:2b:a2:9c:f1:d9:98:a7:eb:1b:a8:14:73:4d:bf:
51:b3:83:42:17:3c:36:19:c7:05:ba:3d:ae:72:b4:
e5:2a:a0:97:0b:d4:d7:04:0d:57:4e:e1:e8:86:2e:
b6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:35:FB:41:EB:9C:DF:25:A6:1D:D1:82:95:D9:68:96:06:CB:30:16
X509v3 Authority Key Identifier:
keyid:5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3a:67:88:09:54:bb:25:bd:14:36:7c:f1:01:14:da:6d:8e:
a2:6c:69:dd:63:a4:a8:06:d1:41:a9:3c:3c:51:de:83:9b:5f:
17:59:b6:af:f8:98:d2:4b:9d:03:89:5a:0f:c6:0a:5e:6d:f1:
22:dd:79:74:6b:54:f0:54:b8:9d:0a:59:6e:31:5e:8c:ee:04:
9e:86:c9:6c:62:00:9d:4d:33:98:07:41:1c:64:89:fb:d3:43:
e4:d3:3d:44:f0:ab:84:90:0d:14:01:a5:c8:04:77:8f:25:f2:
ce:e6:e2:f9:21:28:20:ad:16:65:51:70:24:3b:c4:19:64:98:
25:92:5d:ab:b2:32:0d:98:7d:e8:de:84:a3:e2:1e:62:35:6f:
f3:eb:59:f6:c1:b5:c2:47:8e:18:8c:0c:4d:38:1a:2b:7d:47:
eb:ed:12:53:5b:40:c9:cd:12:e4:ea:38:4f:c4:ca:1c:fb:e1:
5b:3a:7e:fd:1e:05:30:7c:4f:d5:71:dc:98:ec:b2:d3:cf:6b:
31:db:fb:4f:6d:a6:5a:f6:ae:99:26:c0:3c:d5:8a:f0:2a:4b:
1a:05:b1:84:48:88:72:ee:55:dc:48:bd:c9:3e:4a:e1:d7:3e:
d6:3d:59:6a:17:ce:2f:fd:fb:6b:41:50:24:00:51:b1:c1:a7:
58:86:76:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:55 2025 by rpki-client